Overview

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible.

Responsibilities

• BE/BTech in Electronics/EC/EE/CS/IT Engineering or MCA
• At least one security certification such as CCNA Security, CCSA, CEH, CompTIA, GCIH/GCIA
• At least one SIEM solution certifications with one or more SIEM/ Security solutions (i.e., RSA NetWitness, Splunk ES, Elastic ELK, HP ArcSight, IBM QRadar Log Rhythm).
• Minimum overall 5 years of experience in handling security related products & services in a reputed organization out of which 3 years’ experience should be in SIEM solution.
• Person should have adequate knowledge of security devices like firewalls, IPS, Web Application Firewall, DDOS, EDR, Incident response, SOAR and other security devices
• Administration of SIEM environment (e.g.: deployment of solution, user management, managing the licenses, upgrades and patch deployment, addition or deletion of log sources, configuration management, change management, report management, manage backup and recovery, etc.)
• Construction of SIEM content required to produce Content Outputs (e.g., filters, active lists, correlation rules, reports, report templates, queries, trends, variables)
• Integration of customized threat intelligence content feeds provided by the Threat Intelligence & Analytics service
• Identifies possible sensor improvements to prevent incidents
• Collects/updates threat intelligence feeds from various sources
• Creates situational awareness briefings
• Co-ordinates with the different departments for incident analysis, containment and remediation
• Liaise with Security monitoring team to discover repeatable process that lead to new content development
• Provides engineering analysis and architectural design of technical solutions
• Knowledge of networking protocols and technologies and network security
• Sound analytical and troubleshooting skills
• Monitors client infrastructure and solutions.
• Identifies problems and errors prior to or when they occur.
• Routinely identifies common incidents and opportunities for avoidance as well as general opportunities for incident reduction.
• Investigates first line incidents assigned and identifies the root cause of incidents and problems.
• Provides telephonic or chat support to clients when required.
• Schedules maintenance activity windows for patching and configuration changes.
• Follows the required handover procedures for shift changes to ensure service continuity.
• Reports and escalates incidents where necessary.
• Ensures the efficient and comprehensive resolutions of incidents and requests.
• Updates existing knowledge articles or create new ones.
• Identifies opportunities for work optimization including opportunities for automation of work, request fulfilment, incident resolution, and other general process improvement opportunities.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering Disaster Recovery functions and tests.
• Performs any other related task as required.